Battling new nasties

Getting the message

Failing to block HTML within emails or instant messaging (IM) was the source of another growing threat, Websense's Camissar said. IM was a backdoor enabling hackers to hit unsuspecting employees.

According to Gartner, companies also need to consider implementing IM management and security programs. As use increases so do threats, with attackers beginning to shift focus from better protected email systems, the market analyst firm noted.

IM viruses are transmitted in two ways: as executable file attachments or as hyperlinks in text directing victims to malicious Web servers.

So what tools can businesses use to ward off some of the latest security nasties? Camissar said they needed to implement a proactive approach to Web security.

"This includes technology to block access to these types of infected websites and applications, as well as rigorous Internet security education programs for employees," he said.

AusCert listed anti-spam filters, antivirus software, digital IDs, certificates, VPNs, encrypted login/sessions, encrypted files, IDS, firewalls, file integrity assessment tools, biometrics, smart cards, one- time tokens, reusable passwords and access control as top security technologies in its latest survey. But no matter what the tool, simplicity would remain vital to success, T3's Munden said, because employees would find ways around cumbersome and time consuming measures.

She said there was a growing market for solutions that provide protection, security and control for email and Internet users.

The company's latest data security solution lets users encrypt and decrypt private information.

They can also create digital signatures, which ensure the documents can only be read by the recipient, and create digital certificates to prevent malicious impersonation by a third party.

The right connections

Netgear managing director, Ian McLean, said resellers should pitch remote access connectivity via technologies such as SSL VPN. In the past, the technology was costly and difficult to configure but now users could get a secure connection through the browser interface.

Crossbeam country manager, Peter Owen, said resellers could also help businesses consolidate security applications onto a single hardware platform. The alternative, he said, was a plethora of security appliances with increasing management overheads and cost of ownership.

In terms of threat mitigation, many companies have a number of different technologies in play including firewall, basic intrusion detection systems, email filtering and antivirus. Given advancements in network security technology, Owen suggested users could get a host of applications in one appliance.

"The technology has advanced to allow for consolidation," he said. "This allows for a more holistic view and addresses a number of different threats."

The consolidation scenario is ideal for a branch office environment because it created a uniformed security management structure.